network-engineer video for your company's infrastructure consists of a single Virtual Private Cloud (VPC) network set up in Google Cloud, with existing
Your company's infrastructure consists of a single Virtual Private Cloud (VPC) network set up in Google Cloud, with existing on-premises connectivity. You're tasked with deploying a new application on Google Kubernetes Engine (GKE). The application must only be accessible from within the same VPC network and from on-premises locations. Additionally, you need to ensure that the GKE control plane is exclusively exposed to a predefined list of on-premises subnets via private connectivity. What's the most appropriate course of action?